bugcrowd / vulnerability-rating-taxonomy
Bugcrowd’s baseline priority ratings for common security vulnerabilities
☆444Updated 2 weeks ago
Related projects ⓘ
Alternatives and complementary repositories for vulnerability-rating-taxonomy
- Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)☆443Updated 5 years ago
- ☆418Updated last year
- Tools and datas related to Bug Bounty.☆229Updated 2 years ago
- ☆353Updated 2 years ago
- Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists☆694Updated last year
- Content discovery wordlists generated using BigQuery☆557Updated 4 years ago
- ☆454Updated 3 years ago
- Open Redirect Payloads☆583Updated last month
- Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.☆524Updated 6 years ago
- 🎯 Open Redirect Payload List☆528Updated 3 months ago
- Bug Bounty Guide is a launchpad for bug bounty programs and bug bounty hunters.☆458Updated 2 years ago
- ☆787Updated 11 months ago
- ☆204Updated 3 years ago
- SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types i…☆135Updated 6 years ago
- A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily rep…☆249Updated last year
- ☆531Updated 9 months ago
- vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.☆306Updated 7 months ago
- An automated approach to performing recon for bug bounty hunting and penetration testing.☆443Updated 4 years ago
- A simple SSRF-testing sheriff written in Go☆315Updated last week
- Bugbounty scope tool☆318Updated last month
- This repository created for personal use and added tools from my latest blog post.☆347Updated last year
- A highly configurable Framework for easy automated web scanning☆364Updated 4 years ago
- Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature☆107Updated 7 years ago
- This repository contains all the supplement material for the book "The art of sub-domain enumeration"☆639Updated 5 years ago
- Correlated injection proxy tool for XSS Hunter☆249Updated last year
- Subdomain Takeover Scanner | Subdomain Takeover Tool | by 0x94☆353Updated last year
- A collection of templates for bug bounty reporting☆378Updated 3 years ago
- An open source tool to aid in command line driven generation of bug bounty reports based on user provided templates.☆205Updated 4 years ago
- Fetches javascript file from a list of URLS or subdomains.☆739Updated last year
- A tool that can help detect and takeover subdomains with dead DNS records☆745Updated 3 years ago